1110 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
aitbc	47104db99b	security: replace SHA-256 with PBKDF2-HMAC-SHA256 for key derivation ... - scripts/utils/keystore.py: use PBKDF2 with 100,000 iterations - cli/keystore_auth.py: use PBKDF2 with 100,000 iterations - cli/aitbc_cli.py: use PBKDF2 with 100,000 iterations - apps/agent-coordinator/scripts/agent_daemon.py: use PBKDF2 with 100,000 iterations Fixes 4/25 CodeQL alerts related to weak cryptographic hashing. Note: cli/utils/__init__.py already uses Argon2 which is more secure.	2026-04-23 17:26:41 +02:00
aitbc	3c4762e51d	security: fix clear-text storage and path traversal CodeQL alerts ... - scripts/utils/setup_production.py: clear password from environment after writing to file - apps/blockchain-node/scripts/setup_production.py: clear password from memory after writing to file Fixes 2/25 CodeQL alerts related to clear-text storage of sensitive information.	2026-04-23 17:25:45 +02:00
aitbc	dcaa9cbf3c	security: mask sensitive data in logging output to fix CodeQL alerts ... - scripts/utils/generate-api-keys.py: mask API keys in output - apps/coordinator-api/src/app/deps.py: mask API keys in debug logging - dev/scripts/generate_production_keys.py: mask sensitive secrets in output - scripts/security/security_audit.py: add sensitive data masking for issues/recommendations Fixes 7/25 CodeQL alerts related to clear-text logging of sensitive information.	2026-04-23 17:24:56 +02:00
aitbc	91bba69653	security: update poetry.lock files for blockchain-node and wallet ... Ran poetry lock to update lock files with new dependency versions: - pytest: 8.2.0 → 8.3.0 (fixes tmpdir handling vulnerability) - python-multipart: updated to latest version (fixes DoS vulnerability) This resolves the final 2 moderate vulnerabilities in poetry.lock files.	2026-04-23 17:12:51 +02:00
aitbc	3c2cfcb67a	fix: revert cryptography version from 47.0.0 to 46.0.0 in pyproject.toml files ... Version 47.0.0 does not exist in PyPI. Reverted to 46.0.0 which is the latest available version and still provides security fixes for the reported vulnerabilities.	2026-04-23 17:12:09 +02:00
aitbc	213c288cac	security: update pyproject.toml files for Phase 2 vulnerability fixes ... - cryptography: 41.0.0 → 47.0.0 in aitbc-sdk, aitbc-crypto, aitbc-core - cryptography: added >=47.0.0 to blockchain-node dependencies - pytest: 8.2.0 → 8.3.0 in blockchain-node, coordinator-api, wallet, pool-hub - pytest: ^8.3.0 → >=8.3.0 in blockchain-event-bridge This addresses remaining cryptography buffer overflow and pytest tmpdir vulnerabilities in poetry.lock files. Lock files will be regenerated with poetry lock.	2026-04-23 17:10:54 +02:00
aitbc	fa78825433	security: update dependencies to fix dependabot vulnerabilities (Phase 1) ... - cryptography: 46.0.7 → 47.0.0 (fixes 4 high-severity vulnerabilities) - ecdsa: 0.19.2 → 0.19.3 (fixes timing attack vulnerability) - black: 26.3.1 → 26.4.0 (fixes arbitrary file writes) - orjson: 3.11.8 → 3.11.9 (fixes recursion limit issue) - python-multipart: 0.0.6 → 0.0.25 (fixes 3 high-severity vulnerabilities) Updated in: - requirements.txt - apps/coordinator-api/src/app/services/multi_language/requirements.txt This resolves ~20/72 dependabot alerts with low-risk minor version updates.	2026-04-23 17:08:30 +02:00
aitbc	d22f795b56	Update README and documentation index for v0.3.2 release ... - Simplify root README to focus on implemented features and quick navigation - Replace verbose project structure with concise feature list - Remove recent achievements section (moved to release notes) - Add direct links to master index and main documentation - Update MASTER_INDEX.md to focus on documentation catalog - Remove project completion status (moved to release notes) - Remove learning path sections (kept in individual path	2026-04-23 17:04:03 +02:00
aitbc	e60cc3226c	Add sys import to test files and remove obsolete integration tests ... - Add sys import to 29 test files across agent-coordinator, blockchain-event-bridge, blockchain-node, and coordinator-api - Remove apps/blockchain-event-bridge/tests/test_integration.py (obsolete bridge integration tests) - Remove apps/coordinator-api/tests/test_integration.py (obsolete API integration tests) - Implement GPU registration in marketplace_gpu.py with GPURegistry model persistence	2026-04-23 16:43:17 +02:00
aitbc	b8b1454573	fix: remove blockchain-event-bridge health check ... Remove blockchain-event-bridge service health check from comprehensive scenario script since the service is not configured.	2026-04-23 13:11:57 +02:00
aitbc	fc26eef3fb	fix: remove tracked runtime files and update .gitignore ... - Add contracts/artifacts/, *.dbg.json, cli/build/, dev/test-nodes/*.log to .gitignore - Remove tracked contract artifacts from git - Remove tracked build artifacts from git - Remove tracked test logs from git	2026-04-23 13:10:11 +02:00
aitbc	b7b5d042bd	Remove duplicate .gitignore entries and fix script permissions ... - Remove duplicate runtime file patterns from .gitignore (data/, config/, logs/, production/, *.log, *.db, *.db-wal, *.db-shm, !*.example) - Make generate_unique_node_ids.py executable	2026-04-23 13:08:33 +02:00
aitbc	1b5f27e9db	Update .gitignore and fix audit paths to use standard Linux directories ... - Add comprehensive runtime file patterns to .gitignore (data/, config/, logs/, production/, *.log, *.db, *.db-wal, *.db-shm) - Keep *.example files tracked for configuration templates - Update CLI audit command to use FHS-compliant paths (/var/lib/aitbc, /etc/aitbc, /var/log/aitbc)	2026-04-23 12:47:22 +02:00
aitbc	af7a971404	fix: update .gitignore to exclude tracked runtime files ... - Added cli/config/ to gitignore (CLI configuration files) - Added dev/cache/logs/ to gitignore (development logs) - Added dev/config/ to gitignore (development config) - Added dev/test-nodes/*/data/ to gitignore (test node data) - Removed tracked runtime files from git index - Kept apps/coordinator-api/src/app/data/ (contains application code) - Removed contracts/artifacts/**/*.dbg.json (debug artifacts) - Removed dev/test-nodes/brother_node/data/*.db (database files) - Removed dev/cache/logs/*.log (log files) - Removed dev/config/* (development config files)	2026-04-23 12:36:41 +02:00
aitbc	522655ef92	Move blockchain app READMEs to centralized documentation ... - Relocate blockchain-event-bridge README content to docs/apps/blockchain/blockchain-event-bridge.md - Relocate blockchain-explorer README content to docs/apps/blockchain/blockchain-explorer.md - Replace app READMEs with redirect notices pointing to new documentation location - Consolidate documentation in central docs/ directory for better organization	2026-04-23 12:24:48 +02:00
aitbc	cd240485c6	Fix RPC server startup in blockchain node service ... - Modify combined_main.py to start HTTP RPC server alongside blockchain node - Use uvicorn.Server with asyncio to run both services concurrently - Fix shutdown code to properly stop HTTP server - eth_getLogs endpoint now accessible at http://localhost:8006/rpc/eth_getLogs	2026-04-23 11:17:14 +02:00
aitbc	6a7258941a	Fix: Initialize _last_block_timestamp from head block on startup ... This fixes the hybrid mode heartbeat logic which was unable to calculate time since last block after service restart because _last_block_timestamp was None.	2026-04-23 11:02:03 +02:00
aitbc	4b001a95d2	Implement adaptive sync and hybrid block generation ... - Add adaptive sync with tiered batch sizing for initial sync - Initial sync (>10K blocks): 500-1000 batch size, 2s poll, 10s bulk interval - Large gap (1K-10K blocks): 200-500 batch size, 3s poll, 30s bulk interval - Medium gap (500-1K blocks): 100-200 batch size, 5s poll, 60s bulk interval - Reduces 2.9M block sync from 10 days to ~8 hours - Add hybrid block generation with heartbeat - Modes: always, mempool-only, hybrid (default) - Skip empty blocks in hybrid/mempool-only modes - Force heartbeat block after 60s idle for consensus safety - Adaptive loop timing: hybrid checks every 2.5s for heartbeat detection - Add metrics for sync and block generation behavior - sync_empty_blocks_skipped_total - sync_heartbeat_blocks_forced_total - sync_time_since_last_block_seconds - sync_mode, sync_gap_size, sync_batch_size - sync_bulk_duration_seconds, sync_blocks_per_second	2026-04-23 10:59:24 +02:00
aitbc	90edea2da2	Add blockchain event bridge service with smart contract event integration ... - Phase 1: Core bridge service with gossip broker subscription - Phase 2: Smart contract event integration via eth_getLogs RPC endpoint - Add contract event subscriber for AgentStaking, PerformanceVerifier, Marketplace, Bounty, CrossChainBridge - Add contract event handlers in agent_daemon.py and marketplace.py - Add systemd service file for blockchain-event-bridge - Update blockchain node router.py with eth_getLogs endpoint - Add configuration for contract addresses - Add tests for contract subscriber and handlers (27 tests passing)	2026-04-23 10:58:00 +02:00
aitbc	ab45a81bd7	docs: update GitHub workflow to v4.0 with three-node verification ... - Added gitea-runner node to all verification steps - Added Section 8: Push to GitHub (Milestone Only) as final step - Updated Quick Commands to include gitea-runner sync - Updated Milestone Push Workflow with 3-node verification - Updated Troubleshooting section to handle gitea-runner sync issues	2026-04-22 16:06:36 +02:00
aitbc	e22d864944	feat: implement CLI blockchain features and pool hub enhancements ... CLI Blockchain Features: - Added block operations: import, export, import-chain, blocks-range - Added messaging system commands (deploy, state, topics, create-topic, messages, post, vote, search, reputation, moderate) - Added network force-sync operation - Replaced marketplace handlers with actual RPC calls - Replaced AI handlers with actual RPC calls - Added account operations (account get) - Added transaction query operations - Added mempool query operations - Created keystore_auth.py for authentication - Removed extended features interception - All handlers use keystore credentials for authenticated endpoints Pool Hub Enhancements: - Added SLA monitoring and capacity tables - Added billing integration service - Added SLA collector service - Added SLA router endpoints - Updated pool hub models and settings - Added integration tests for billing and SLA - Updated documentation with SLA monitoring guide	2026-04-22 15:59:00 +02:00
aitbc	51920a15d7	Add chain_id field to all block import test requests ... - Add chain_id parameter to importBlock requests in all verification tests - Update test_block_import.py to use high block heights to avoid conflicts with existing chain - Simplify test_block_import.py to focus on core validation (hash, parent, conflict) - Fix test_block_import_complete.py to use head block instead of block 1 for existing block test - Update expected response format from status field to success field	2026-04-22 15:05:23 +02:00
aitbc	e611530bd0	Disable SQLite WAL mode due to disk I/O errors ... - Comment out PRAGMA journal_mode=WAL in database.py - Keep other SQLite optimizations (synchronous=NORMAL, cache_size, temp_store) - CoW already disabled on data directory via chattr +C	2026-04-22 14:39:32 +02:00
aitbc	fb15b5c1cb	Re-enable state root computation in blockchain node ... - Fix chain_id mismatch (ait-devnet -> ait-mainnet) - Add logger definition to poa.py for state root computation - Recompute state_root after genesis account initialization - Create genesis.json with account allocations for ait-mainnet - Update config.py supported_chains to ait-mainnet	2026-04-22 14:32:30 +02:00
aitbc	607ad2d434	Remove debug logging and update default chain to ait-mainnet	2026-04-22 14:20:49 +02:00
aitbc	670fff409f	Remove debug logging from router	2026-04-22 13:49:21 +02:00
aitbc	b064f922bd	Add normalization to gossip transaction processing to preserve type field	2026-04-22 13:48:20 +02:00
aitbc	4158508f4d	Fix sync to preserve transaction type field when creating ChainTransaction	2026-04-22 13:44:32 +02:00
aitbc	d5a03acabb	Remove debug logging from router.py and poa.py	2026-04-22 13:42:08 +02:00
aitbc	941fff1b9d	Fix sync error: use block_data['height'] instead of undefined height variable	2026-04-22 13:41:06 +02:00
aitbc	f36fd45d28	Implement RECEIPT_CLAIM transaction type ... - Add status fields to Receipt model (status, claimed_at, claimed_by) - Add RECEIPT_CLAIM handling to state_transition.py with validation and reward minting - Add type field to Transaction model for reliable transaction type storage - Update router to use TransactionRequest model to preserve type field - Update poa.py to extract type from mempool transaction content and store only original payload - Add RECEIPT_CLAIM to GasType enum with gas schedule	2026-04-22 13:35:31 +02:00
aitbc	a6a840a930	feat: implement MESSAGE transaction type and re-enable state root computation ... - Add MESSAGE transaction type to router.py valid_types - Add MESSAGE handling to state_transition.py (value=0, fee-only) - Add GasType.MESSAGE to gas schedules - Re-enable state root computation in poa.py - Change SQLite journal_mode to WAL for corruption prevention - Add chattr +C to setup.sh for Btrfs CoW prevention	2026-04-22 13:06:01 +02:00
aitbc	054adaf7be	feat: switch SQLite to WAL mode and disable Btrfs CoW for data directory ... - Change SQLite journal mode from DELETE to WAL for better concurrency - Add chattr +C to /var/lib/aitbc in setup.sh to disable Btrfs Copy-on-Write - Add fallback logging when chattr is unavailable or fails - Prevent SQLite corruption on Btrfs filesystems by ensuring overwrite-in-place behavior	2026-04-21 22:00:47 +02:00
Andreas Michael Fleckl	be48ec8a1b	Merge pull request #77 from oib/feature/test-restructuring ... refactor: restructure test suite	2026-04-21 21:27:48 +02:00
Andreas Michael Fleckl	f5e4ec8742	Merge pull request #76 from oib/feature/cli-config-hardening ... feat: harden CLI config editing with safer subprocess invocation	2026-04-21 21:25:11 +02:00
Andreas Michael Fleckl	387bbce8d0	Merge pull request #74 from oib/feature/website-cleanup ... chore: cleanup website files	2026-04-21 21:23:01 +02:00
Andreas Michael Fleckl	872e2deeb6	Merge pull request #73 from oib/feature/test-config-improvements ... feat: improve test configuration and fixtures	2026-04-21 21:22:21 +02:00
Andreas Michael Fleckl	488a75aebe	Merge pull request #72 from oib/feature/wallet-improvements ... Feature/wallet improvements	2026-04-21 21:19:23 +02:00
aitbc	cad12ab2fe	chore: cleanup website files ... - Remove website/dashboards/ directory - Remove website/aitbc-proxy.conf - Remove website/README.md - Update website documentation files with minimum Python version - Update website assets (CSS, JS) for improved performance - Update docs/ with minimum Python version and updated paths	2026-04-21 21:15:55 +02:00
aitbc	14e2d96870	refactor: restructure test suite ... - Remove tests/production/ directory (JWT auth, production monitoring, etc.) - Remove tests/staking/ directory - Remove tests/services/test_staking_service.py - Remove tests/phase1/ directory - Remove tests/load_test.py - Add tests/verification/ directory with 20+ new test files - Add tests/load/locustfile.py for load testing - Add tests/security/test_confidential_transactions.py - Add tests/integration/test_working_integration.py - Update docs/ for minimum Python version and paths	2026-04-21 21:15:27 +02:00
aitbc	43d81553dd	feat: add wallet improvements and new commands ... - Add multisig transaction support with approval workflow - Add liquidity staking with tier-based APY (bronze/silver/gold/platinum) - Add liquidity unstaking with rewards calculation - Add rewards command to view staking and liquidity rewards - Adjust wallet balance flow for non-interactive table output mode - Store unencrypted by default in table output flow	2026-04-21 21:15:00 +02:00
aitbc	369b7fb000	feat: improve test configuration and fixtures ... - Add cli to pytest.ini pythonpath for test discovery - Simplify tests/conftest.py to only mock aitbc_crypto when not importable - Add minimal aitbc_crypto.signing.ReceiptSigner mock for coordinator imports - Remove complex test fixtures and collection hooks - Update pytest.ini with comprehensive pythonpath entries - Add environment variables for tests - Add warning filters for common deprecations	2026-04-21 21:14:31 +02:00
aitbc	2233a16294	feat: harden CLI config editing with safer subprocess invocation ... - Replace os.system editor invocation with shlex.split + subprocess.run - Add yaml.safe_load fallback to {} when exporting empty YAML - Add new config commands: import, validate, environments, profiles, secrets - Update tests to patch subprocess.run and test new config commands - Protect against empty EDITOR env values	2026-04-21 21:14:09 +02:00
aitbc	cdba253fb2	fix: add default_peer_rpc_url for bulk sync fallback ... - Add default_peer_rpc_url configuration parameter - Update bulk sync fallback to use default_peer_rpc_url instead of gossip_broadcast_url - Fixes 'unsupported protocol redis://' error in bulk sync - gossip_broadcast_url is for Redis backend, not HTTP RPC calls	2026-04-20 22:05:05 +02:00
aitbc	ca4e3d9c46	feat: implement dynamic batch size for bulk sync ... - Add _calculate_dynamic_batch_size method to sync.py - Scale batch size based on gap size: - Small gaps (< 100): 20-50 blocks for precision - Medium gaps (100-500): 50-100 blocks - Large gaps (> 500): 100-200 blocks for speed - Add min_bulk_sync_batch_size and max_bulk_sync_batch_size config params - Update bulk_import_from to use dynamic batch size - Replaces fixed 50-block batch size with adaptive sizing	2026-04-20 22:00:31 +02:00
aitbc	404cec1098	config: change block generation time from 2s to 10s ... - Increase block_time_seconds from 2 to 10 seconds - Reduces block generation frequency - Helps with sync gap recovery by giving more time between blocks	2026-04-20 21:49:39 +02:00
aitbc	8ad3af7131	fix: handle closing parenthesis in gap size parsing ... - Add .replace(")", "") to received_height parsing - Fixes ValueError when parsing '9007)' as integer - Auto sync was failing due to parsing bug in main.py - Reason format: 'Gap detected (our height: 8175, received: 9007)'	2026-04-20 21:43:01 +02:00
aitbc	391ba4ca2e	fix: add nosec comments for B104 in config.py ... - Add nosec B104 comments for rpc_bind_host and p2p_bind_host - These are intentional defaults for distributed blockchain - P2P nodes need to accept connections from peers - RPC needs to be accessible from other machines in cluster - Suppresses Bandit security scan warnings	2026-04-20 21:23:10 +02:00
aitbc	ea12226a5d	fix: exclude tests/production from integration-tests ... - Add --ignore=tests/production to pytest command - Tests in production/ are localhost-backed integration tests - Not suitable for CI environment - Fixes AssertionError for missing /opt/aitbc/services/monitor.py	2026-04-20 21:21:47 +02:00
aitbc	29b6ee93bb	fix: add aitbc-agent-coordinator to integration-tests workflow ... - Add aitbc-agent-coordinator to service start step - Add aitbc-agent-coordinator to service status report - Port 9001 is used by agent-coordinator service - Fixes port 9001 not ready error in integration tests	2026-04-20 21:20:19 +02:00